GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: metallb, opentelemetry-operator, calico, k8ssandra-client, kubernetes-csi-external-snapshotter, flux-helm-controller, rancher, cloud-provider-aws, yunikorn-k8shim, kubernetes-csi-external-attacher, descheduler, rancher-system-agent, tetragon,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: keda-http-add-on-fips, ansible-operator, image-factory-fips, opentelemetry-operator, rancher-support-bundle-kit, karpenter, helm-operator-fips, cert-manager, rancher-webhook-fips, seaweedfs-operator-fips, chainloop-artifact-cas-fips, flux-operator-fips,...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-accessanalyzer, gitlab-pages, chronograf-fips, crossplane-provider-aws-ecrpublic-fips, crossplane-provider-aws-dlm-fips, cluster-autoscaler, cloud-sql-proxy, fleet-server, prometheus-fips, vault-benchmark,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-grafana, coder, drone-fips, gitlab-workhorse-ce-fips, kyverno, traefik, argo-cd-fips, prometheus-fips, cert-manager, upwind-agent, minio, gatekeeper, chisel-fips, frankenphp-8.5, gitea, istio, tekton-pipelines, zarf, argo-workflows,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, chainctl-fips, commercial-grafana, scorecard, longhorn-cli, coder, drone-fips, gitlab-workhorse-ce-fips, kyverno, terraform-fips, traefik, external-secrets-operator, argo-cd-fips, prometheus-fips, cert-manager, chainloop-cli-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, step-ca-fips, nfpm, chainctl-fips, commercial-grafana, scorecard, gitlab-workhorse-ce-fips, terraform-fips, kyverno, openbao, traefik, external-secrets-operator, argo-cd-fips, prometheus-fips, cert-manager, chainloop-cli-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-grafana, coder, drone-fips, gitlab-workhorse-ce-fips, kyverno, traefik, argo-cd-fips, prometheus-fips, cert-manager, docker-machine-driver-harvester, upwind-agent, minio, gatekeeper, chisel-fips, frankenphp-8.5, gitea, istio,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-grafana, gitlab-workhorse-ce-fips, kyverno, traefik, argo-cd-fips, prometheus-fips, cert-manager, upwind-agent, minio, docker-cli-buildx, gatekeeper, frankenphp-8.5, istio, tekton-pipelines, argo-workflows, frankenphp-8.4, harbor, buildah,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, commercial-grafana, gitlab-workhorse-ce-fips, terraform-fips, kyverno, traefik, argo-cd-fips, prometheus-fips, cert-manager, upwind-agent, minio, packer, docker-cli-buildx, gatekeeper, frankenphp-8.5, istio, tekton-pipelines, argo-workflows,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, nfpm, chainctl-fips, commercial-grafana, scorecard, gitlab-workhorse-ce-fips, terraform-fips, kyverno, traefik, external-secrets-operator, argo-cd-fips, prometheus-fips, cert-manager, chainloop-cli-fips, upwind-agent, minio, apply-cve-bump, packer,...

GO-2026-5643 Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline...

GO-2026-5711 Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline...

GO-2026-5630 Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline...

GO-2026-5486 Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

CLEANSTART-2026-HU33730 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-34986, CVE-2026-39882, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-fcv2-xgw5-pqxf, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-w8rr-5gcm-pp58 applied in versions: 1.10.2-r0, 1.5.0-r0, 1.5.0-r1, 1.5.0-r2, 1.5.0-r3, 1.5.0-r4

Multiple security vulnerabilities affect the tekton-pipelines package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UG89030 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-34986, CVE-2026-39882, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-fcv2-xgw5-pqxf, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p, ghsa-w8rr-5gcm-pp58 applied in versions: 1.11.0-r0, 1.5.0-r0, 1.5.0-r1, 1.5.0-r2, 1.5.0-r3, 1.5.0-r4

Multiple security vulnerabilities affect the tekton-pipelines package. These issues are resolved in later releases. See references for individual vulnerability details...